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ABSTRACT 



Each of the vehicle keys issued for a vehicle can be 
selectively authorized and blocked. A lost or stolen vehicle 
key can thus be selectively blocked, in which the vehicle still 
remains usable with the other vehicle keys. For each vehicle 
key, a use authorization can be stipulated in the form of an 
admissible number of uses or use duration. A pager receiver 
is provided in the vehicle, via which the key authorization 
information fed from the central office can be received and 
sent to a control unit, preferably a drive-away blocking 
control unit. 

10 Claims, 1 Drawing Sheet 




Check 
Key ID 










Open door/ 
Start engine 



06/09/2004, EAST Version: 1.4.1 



U.S. Patent 



Mar. 25, 2003 



US 6,538,557 



s 



/ — 


2 

> 






Door Lock 
System 


Control 
Unit 
















Ignition 
Lock 



< ^ Key 



FIG.1 



o 




Check 
Key ID 



Open door/ 
Start engine 



FIG. 2 




06/09/2004, EAST version: 1.4.1 



US 6,538,557 Bl 



SUMMARY OF THE INVENTION 
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DEVICE AND METHOD FOR SECURING A 
MOTOR VEHICLE AGAINST 
UNAUTHORIZED USE 



BACKGROUND OF THE INVENTION 

FIELD OF THE INVENTION 

The invention lies in the automotive art. Specifically, the 
invention concerns a device and method for securing a 
vehicle against unauthorized use. 

A device for securing a vehicle against unauthorized use 
is known from German published patent application DE 195 
08 370. There, a receiving antenna is mounted on the 15 
vehicle, via which signals sent from a central office can be 
received. A control unit is arranged in the vehicle, which 
stores use authorization information sent from the central 
office, at least temporarily. In other words, the vehicle being 
secured is equipped with a transmitting and receiving device 
to transmit data between the vehicle and a central office. 
Before release of the vehicle for utilization, bidirectional 
communication occurs between the vehicle and the central 
office, during which utilization restrictions are transmitted to 
the vehicle and stored in its anti-theft control unit. Utiliza- 
tion restriction can consist of stipulation of an admissible 
operating time or travel distance, or also the admissible 
number of startups of the vehicle or a maximum time 
interval of utilization independent of use. When the utiliza- 
tion restriction criteria are reached, the vehicle is shut down. 



20 
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It is accordingly an object of the invention to provide a 
method and a device for securing a motor vehicle against 
unauthorized use, which overcomes the above-mentioned 35 
disadvantages of the heretofore-known devices and methods 
of this general type and which permits a refined allocation of 
utilization authorization to a vehicle. 

With the foregoing and other objects in view there is 
provided, in accordance with the invention, a device for 40 
securing a motor vehicle against unauthorized use, wherein 
a plurality of keys are issued for the motor vehicle, com- 
prising: 

a receiver including antenna mounted on a motor vehicle 
for receiving signals from a central office; 

a control unit disposed in the motor vehicle for storing use 
authorization information sent from the central office; 

at least some vehicle keys issued for the motor vehicle 
being assigned an identifier different from identifiers 
assigned to others of the vehicle keys, and the control 
unit being programmed to: 

query the identifier of a corresponding vehicle key 

upon an actuation thereof; 
determine a use authorization information stored for the 

corresponding vehicle key; and 
release a function requested by the corresponding key 
only when use authorization is present. 
At least some, preferably all, keys issued for a vehicle can 
be selectively authorized or blocked in the invention. For 60 
example, if a vehicle key is lost or stolen, the invention 
permits selective blocking of this vehicle key, so that the 
vehicle can no longer be opened and/or started by this key. 
However, the other keys still remain authorized so that the 
vehicle can continue to be used with these other keys. The 65 
authorized user can therefore have access to the vehicle in 
the usual manner, but without the hazard of vehicle theft 



with the lost or stolen key. No mechanical interventions into 
the door lock system or ignition lock system are required. 
The necessary data to block the lost or stolen key can be sent 
to the vehicle by the central office, notified by the authorized 
user, and stored in its control unit. 

In accordance with an added feature of the invention, the 
control unit comprises a memory storing use restrictions for 
one or more vehicle keys, and wherein the control unit no 
longer accepts a vehicle key as valid if a corresponding use 
restriction stipulated for the respective key is reached. 

In accordance with an additional feature of the invention, 
the use restriction is defined as a maximum admissible 
number of uses of the corresponding key stored in the 
control unit, and each use of a vehicle key is selectively 
counted for the corresponding vehicle key, and a vehicle key 
is classified as unauthorized upon reaching the maximum 
admissible number of uses stipulated therefor. 

In accordance with a further feature of the invention, the 
control unit contains a memory storing a time value for the 
corresponding vehicle key, and the control unit no longer 
accepts as valid a vehicle key a time value of which has been 
reached. 

In accordance with again an added feature of the 
invention, the time value is stored as an admissible number 
of use days. 

In accordance with again another feature of the invention, 
the data received by the control unit from the central office 
contain a vehicle key identifier notifying the control unit for 
which respective vehicle key the transmitted information, 
such as a maximum use number and/or a time value, is to be 
stored. 

With the above and other objects in view there is also 
provided, in accordance with the invention, a method of 
blocking a motor vehicle against unauthorized use, which 
comprises: 

selectively sending use authorization information for each 
of a plurality of vehicle keys of a motor vehicle from 
a central office to the motor vehicle, wherein each 
vehicle key is provided with its own identifier; 
40 upon an actuation of a respective vehicle key, determining 
its identifier and querying the use authorization infor- 
mation stored for the respective vehicle key; and 
accepting as valid only an authorized vehicle key. 
As an alternative or in addition, it is thus also possible to 
45 stipulate, for each vehicle key, selectively determined use 
criteria, like maximum use frequency, use period or the like. 
As soon as a key reaches its utilization limit, it is no longer 
accepted by the vehicle control unit, i.e., no longer permits 
opening and/or starting of the vehicle until it is again 
classified as authorized via the central office. 

Each of the keys issued for a vehicle can therefore be 
individualized with respect to its use authorization. 
However, it is not essential in all cases that all keys 
allocated to a specific vehicle be assigned mutually 
different utilization authorizations. It is also possible to 
classify the keys in groups with different utilization 
criteria and prescribe the same criteria for each key 
within a group. For example, this can be useful in larger 
companies, in which a certain vehicle is used by a 
number of persons, who are allocated to different 
person groups (for example, service employees/ 
couriers/maintenance personnel). Moreover, it is pos- 
sible to equip all keys issued for a specific vehicle 
initially with the same utilization rights and to adapt 
these utilization rights, as required, only according to 
certain situations. The information required for this is 
sent to the concerned vehicle by the central office 
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(service provider) and stored in its control unit and/or The construction and method of operation of the 
transmitted to the corresponding key and recorded in it. invention, however, together with additional objects and 
At least some, preferably all, keys prescribed for a certain advantages thereof will be best understood from the follow- 
vehicle contain their own identifier, which is queried by the ing description of specific embodiments when read in con- 
control unit upon the actuation of the corresponding key (for 5 nection with the accompanying drawings, 
opening the vehicle and/or operating the vehicle). The 

control unit preferably contain^ a memory, in which the BRIEF DESCRIPTION OF THE DRAWINGS 

utilization authorization and, optionally, the corresponding pjo # i [ s a D i oc k diagram of an exemplary embodiment of 

utilization parameters are stored for all admissible keys, for me device according to the invention; and 

example, the admissible use frequency, etc. Upon an actua- 10 mQ 2 ^ a flow chart d icti the method of ation 

tion of a key, the control unit queries the corresponding of me dev ^ ce 0 f pi£ j 

memory entry and decides from it whether the key is 

authorized or not. If it is not authorized, the control unit DESCRIPTION OF THE PREFERRED 

blocks opening of the vehicle and/or starting of the engine EMBODIMENTS 

or another measure necessary for vehicle operation. 15 _ _ . , . - c . , 

However, if the key is recognized as authorized, key con- . Referruig now to ^ figures of the drawmg in detail and 

firmation is accepted, i.e., the vehicle is opened or the engine particuUrly, to HO 1 thereof, there is seen an exem- 

started. If the maximum use frequency of the key is to be ? h ?„ ^odiment of the system with a control unit 2 

stipulated as utilization criterion/the thus far valid number msteUed m a non-illustrated vehicle, which is in communi- 

c **n j • -ui £. *, • a a u a tw r*r\ cations connection via a receiver containing an antenna 1 

of still admissible future uses is reduced by one and this 20 . , . m, . . . i «= / 

, j j * *u a„ ♦;.,<> with a likewise non-illustrated central office (service 

value recorded in the control unit. As an alternative, the . _ x _ . . v , 

number of thus far executed key activations can also be P r ° vider )- ™ e communications connection may be 

counted and the current numerical value compared with a bidjrecUp^aUo that information can be mutuaUy exchanged 

. . . • ,i * i ** a- * *u ™ between the Antral office and control unit 2. In the present 

value stored in the control unit corresponding to the maxi- . ... , ..... i _. * . 

c 4- i * e *u- i ifl i u i ^ exemplary embodiment, however, unidirectional data trans- 
mum use frequency stipulated for this key. If the latter value 25 . ? * _ / , „ ' 4l _ _ . _ . 

u j u * i i ~- mission from the central office to the control unit 2 is 

is reached, subsequent key activations are no longer _ . 4 _ t , „ , t c 

.j sufficient. The central office can be a component of a 
accented 

t. • ... . „i . „ „„ a !• - t fnr n „ n „ ac „ n „A communications net for public, mobile telecommunication 

It is also possible to stipulate a use limit tor a correspond- , . , r , ! t . 

, . J c e • /c ™ i 4 * i and receives from those authorized for utilization — usually 

ing key m the form of a maximum time (for example, a total , . , . . J 

~t 'inri \A nw > ^tu^;^^ t : nn \ , n tne vehicle owners — information that is to be transmitted to 

or 100 days use authorization). 30. j- i.- i . • • * i ** t, . 

A ' u t . •* • i *ui 4 ^ 4U the corresponding vehicle contammg control unit 2. This 

As an alternative, it is also possible to store the use . _ ... . J* , ... 

authorization of a corresponding key not in a control unit "Nation * then sent by means of a telecommunications 

memory, but to record it directly in the key itself. In this f or ™* a P a f r . functl0n vemcle and raved bv 

..... . c ij • * • *u i • the control unit 2 via antenna 1. 

case, an additional memory field is present in the key, in 

addition to its stored identifier, in which the information 35 ^ control unit 2 is in communications connection with 

"authorized" or "blocked" is contained, preferably in coded the vehicle door lock system 3, especially a central locking 

form. Bidirectional communication between the control unit mechanism, and/or with the vehicle ignition lock 4. The door 

and the corresponding vehicle key is prescribed here, in lock svslem 3 and /° r the ignition lock 4 can be activated by 

which the control unit, during key use, not only queries its a ke y 5 carried b Y a vehicle user » whic h can either be inserted 

identification, but also the use authorization stored in it. 40 mechanically into one of the vehicle door locks and/or the 

Only when the use authorization reads "authorized" is ignition lock 4 for activation or has a transmitter and/or a 

vehicle utilization permitted. If, however, an order is fed to transponder for signal transmission. The key 5 can be 

the control unit from the central office to classify a certain designed in the usual manner or also as a check card/smart 

vehicle key in the future as "unauthorized", the control unit card. 

stores this information until the corresponding key is used. 45 The control unit 2 can be formed by an immobilizer 

The control unit recognizes this use with reference to the key control unit or drive authorization system control unit and 

identifier and then transmits data to the key that cause contains all functions for opening and locking the vehicle 

rewriting of the corresponding key memory position from doors and/or for activation and blocking of the engine 

"authorized" to "blocked". In the opposite case, when a control. Communication between the actually used key 5 

previously blocked key is again treated as authorized, the 50 and the control unit 2, which may be unidirectional or 

control unit also transmits corresponding information to the bidirectional, can occur via radio transmission, via infrared 

key that causes rewriting of the corresponding key memory transmission, or by inductive transmission via a coil. Each of 

field to "authorized". The data are fed from the control unit the keys 5 prescribed for the vehicle has a corresponding 

to the key, preferably coded, so that the hazard of unautho- communications device, for example, a high-frequency 

rized authorization of a blocked key is minimized. In this 55 (radio) transmitter and/or an infrared transmitter and/or a 

embodiment, the amount of information that must be stored coil, and/or a transponder for bidirectional communication, 

in the control unit is significantly reduced, since the keys The control unit 2 checks whether a used key 5 is authorized 

themselves contain the use authorization information. or not and releases the corresponding control function 

Other features which are considered as characteristic for (unlocking of the vehicle and/or engine control) when the 

the invention are set forth in the appended claims. 60 key is authorized. 

Although the invention is illustrated and described herein The control unit 2 preferably contains a pager receiver 

as embodied in device and a method for securing a vehicle connected to the antenna 1. The pager receiver determines 

against unauthorized use, it is nevertheless not intended to the information intended for it and received by antenna 1 and 

be limited to the details shown, since various modifications stores it and/or sends it to control unit 2. The pager receiver 

and structural changes may be made therein without depart- 65 can have the usual design and be designed separate from the 

ing from the spirit of the invention and within the scope and control unit 2, i.e., inserted between antenna 1 and the 

range of equivalents of the claims. control unit 2. 
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The antenna 1 may be a GPS antenna that is mounted on nications connection in the defined manner with the door 

the rear trunk lid or another external antenna that is already lock system and/or ignition lock. 

present on the motor vehicle. If need be, however, an E acn key contains its own identifier that is allocated 

additional antenna may be prescribed at any convenient selectively to this key and is queried by the control unit 2 

location of the vehicle. 5 during key utilization. The control unit 2 contains a memory, 

Information can be sent to the vehicle via the stationary in which one or more files are stored that state, for each key 

central office as stipulated by the legal owner or possessor, identifier, whether the corresponding key is authorized or 

through which the keys belonging to the vehicle, say eight not. In addition, information can also be contained stating 

keys, ,ca»-bfr au thonged for the first time, or newly autho- how often or how long the key may (still) be used. The 

riz€cf or blocked. The information received via the pager 10 control unit can contain a counting function that is raised 

receiver or control unit 2 can cause selective blocking or during each key utilization or at the beginning of a new time 

authorization of one or more vehicle keys 5 or release of one interval (for example, hour or day). If the maximum number 

or more vehicle keys 5 for a specified number of use stipulated for the corresponding key is reached, the key will 

processes or a specified number of time units (for example, no longer be accepted. As an alternative, the counting 

hours or days). In the latter instance, the control unit 2 15 function can also be implemented so that after correspond- 

contains a calendar function, especially in the form of a ing information is supplied from the central office (for 

real-time clock. example, use authorization for key x for 100 uses), this value 

In the device according to the invention the receiver is stored and then, with each use of the key, reduced in 
(pager receiver) is permanently installed with the antenna 1 number and the resulting value stored, which, during sub- 
in or on the vehicle, which permits selective blocking or 20 sequent key use, is again decreased by one. As soon as the 
authorization of all keys 5 belonging to the vehicle. The value zero is reached, the corresponding key is classified as 
information received via the receiver is temporarily stored in blocked and no longer permits use of the vehicle, 
a corresponding memory, for example, in control unit 2. As As an alternative, it is also possible to store the use 
soon as a key 5 is activated, for example, inserted into the authorization data selectively in the corresponding key in a. 
vehicle door lock or ignition lock (or a keyfob is switched 25 corresponding memory field. This memory field can either 
for contactless data transmission), the control unit checks contain just the overall assertion "use authorized yes/no" or 
whether the key is authorized or not. The used key can also store additional information that represents, for example, the 
be notified by the control unit 2 whether it is authorized or number of admissible future uses still available. In the latter 
blocked, in which this information can then be stored in key case, during key use, not only is the key identifier queried, 
5. in a corresponding memory field. The other keys issued 30 but so is this memory field of the control unit and the use 
for this vehicle remain authorized or block independently of authorization recognized from this. The queried number of 
this, depending on the last information supplied for these still admissible future uses is then reduced by the control 
keys from the central office. unit by one and this reduced value stored again in the key. 

The information need not be sent at regular intervals from 35 Authorization and blocking of the key can therefore be 

the central oflice to the vehicle. It is sufficient if information caused by bidirectional data transmission between the key 5 

is sent from the central office when the use authorization and the control unit 2 via the prescribed data transmission 

status of one or more keys is to be changed, for example, path (for example, infrared, high-frequency or inductive line 

when the vehicle or a key was stolen, or when a certain, in the key). 

presently unauthorized key is to be reauthorized (for ^ Referring now to FIG. 2, the flow chart illustrates the 

example, for a certain number of cycles or days). operation of the device according to the invention, i.e., the 

Since considerable space for the antenna 1 and the pager process according to the invention. In a step (SI) the control 

function (receiver) is available in the vehicle, accommoda- unit 2 cyclically checks whether a key 5 is present or not. 

tion of the corresponding components poses no problem. During wireless communication, the presence of a key can 

Power supply to the corresponding units (antenna circuit, 45 be detected with reference to the signals sent by this simul- 

pager receiver, memory, control unit, etc.) can be effected taneously containing an identifier. When the door lock 

via the vehicle battery, so that no dedicated battery for the and/or ignition lock, however, are to be designed so that 

receiving function and information storage, as well as insertion of a key 5 is mechanically detected, for example, 

evaluation, is required. The antenna 1 can be designed because of mechanical displacement of a pin produced by 

sufficiently large according to requirements and receiving 50 the key, the pin position is queried in step (SI) or the 

conditions, so that even in unfavorable reception regions corresponding subroutine is called up by the pin output 

sufficiently good information reception is guaranteed. Since signal, i.e., the step depicted in FIG. 2, in conjunction with 

each individual key can be selectively blocked, it is also step (SI). 

unnecessary to conduct any interventions on the vehicle If no key ^ detected in step (SI), the program remains in 

itself- 55 the waiting loop. However, as soon as a key is detected, step 

If a vehicle key 5 is lost, that key can be selectively (S2) is called up via the "yes" branch, in which checking of 

blocked by the control unit 2 (after receiving corresponding the key identifier occurs. It is then checked in step (S3) 

information from the central office), whereas the other keys whether the identified key is authorized or not. In step (S3), 

can continue to be used by legal possessors. If a previously to check key authorization, the corresponding data are 

misplaced key 5 should be found, it can be authorized again $o accessed, which are stored either in control unit 2 selectively 

selectively via control unit 2 (after receiving the correspond- for the individual keys or directly in the corresponding key. 

ing information supplied from the central office). A replace- if the key is recognized as authorized, in a step (S4) the 

ment key therefore need not be produced. procedure ordered by the key activation is carried out, i.e., 

Nor is it necessary to conduct interventions in already the vehicle door is opened and/or the power supply of the 

present keys, for example, keys in series. Information 65 individual consumers is switched on and/or the engine is 

exchange with the central office occurs via the pager func- started, or the like. In step (S3) or (S4) it can also be checked 

tion of the vehicle, so that the key need only be in commu- whether a use authorization restriction is recorded for the 
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key, for example, in the form of stipulation of a certain 
maximum number of uses or a maximum use time. If this is 
the case, this criterion of the use authorization restriction is 
likewise checked. If an admissible maximum number of key 
activations is to be stipulated, the number of future key 5 
activations still available is reduced by one and this value 
stored in control unit 2 and/or in key 5. 

As shown in FIG. 2 with the dashed line alternative, 
instead of a direct transition from step (S2) to step (S3), an 
additional step sequence (S5), (S6) can be provided, which 10 
is used in a variant in which the use authorization informa- 
tion is actively and variably stored in the key itself. In this 
variant after step (S2) or step (S5) is carried out, it is checked 
in the control unit 2 whether information is present that is to 
be stored in the recognized key. If this is not the case, a 15 
switch directly to step (S3) is made, otherwise the updated 
use authorization information is stored in the key in step 
(S6). This updated information, for example, can cause a 
previously authorized key to no longer be classified as 
authorized or, vice versa, a previously blocked key to be 20 
reauthorized. This information is stored in a corresponding 
memory field of the key. In conjunction with step (S6), a 
switch to step (S3) is then made. 

If, for example, the key with the identifier no. 1 is lost or 
stolen or the entire vehicle with key no. 1 is stolen, the 25 
procedure is as follows: As soon as the legal owner notices 
the loss, he notifies the central office, which thereupon sends 
the information "block key no. 1" or "key no.l no longer 
authorized" to the corresponding vehicle. TTie pager receiver 
in the vehicle receives this information and sends it to the 30 
control unit 2, which stores this information and notes, in the 
corresponding key file, that key no. 1 is no longer autho- 
rized. If an attempt is then made to open the vehicle and/or 
start the engine with key no. 1, the result "no" is achieved 
in step (S3), so that the vehicle doors are no longer opened 35 
and the engine control of the possibly already unlocked 
vehicle cannot be activated. 

Use of the vehicle with the other keys (for example, keys 
no. 2 to 8, with a total of eight keys issued for a vehicle) is 4Q 
still possible without problem, if these are authorized. 

The stipulation of a use restriction for a key, for example, 
for key no. 1, can occur as follows. If the key is to be 
released for 100 use cycles, the legal vehicle owner informs 
the central office (service provider), which sends the infor- 45 
mation "key no. 1 released for 100 cycles" to the corre- 
sponding vehicle. The receiver (pager receiver) contained in 
the vehicle receives this information and sends it to control 
unit 2, which stores this information and thus authorizes key 
no. 1 to unlock the vehicle 100 times and release the engine 50 
control 100 times. Each subsequent key use is recorded and 
counted. As soon as the stipulated maximum number of 100 
is reached, key no. 1 is no longer considered authorized. 

If the key or vehicle is stolen within these 100 cycles, the 
legal vehicle owner notifies the central office of the loss, 55 
which sends corresponding information to the vehicle, clas- 
sifying the key as unauthorized. Should the vehicle owner 
not record the vehicle or key loss, the key is still blocked 
after its 100"* use, so that the vehicle can no longer be 
operated in the future with this key. The stipulation of a use 60 
restriction therefore automatically leads to erasing of the use 
authorization of the corresponding key after the use restric- 
tion condition arises. This use restriction condition can be 
not only be the stipulation of number of maximum admis- 
sible use cycles, but also any other criterion, for example, 65 
stipulation of a maximum use time of, say, 100 days. The 
information sent by the central office to the vehicle in the 
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latter case consists of the report "release key for 100 days," 
in which the control unit determines from this on which day 
the use authorization of key no. 1 expires and permits use of 
key no. 1 until this day, thereafter classifying the key as 
unauthorized and thus functionless. 
I claim: 

1. A device for securing a rotor vehicle against unautho- 
rized use, wherein a plurality of keys are issued for the motor 
vehicle, comprising: 

a receiver mounted in a motor vehicle for directly receiv- 
ing signals from a central office; 

a control unit disposed in the motor vehicle for storing use 
authorization information received by said receiver 
from the central office; and 

at least some vehicle keys issued for the motor vehicle 
being assigned an identifier different from identifiers 
assigned to the other vehicle keys, and said control unit 
being programmed to: 

query the identifier of a respective vehicle key upon an 
activation thereof; 

determine if a key authorization is present in said 
control unit for the respective vehicle key; 

determine if a use authorization is present in said 
control unit for the respective vehicle key only after 
it has been determined that a key authorization is 
present in said control unit for the respective vehicle 
key; and 

release a function requested by the corresponding key 
only when use authorization is present in said control 
unit. 

2. The device according to claim 1, wherein said control 
unit comprises a memory storing use restrictions for one or 
more vehicle keys, and wherein said control unit no longer 
accepts a vehicle key as valid if a corresponding use 
restriction stipulated for the respective key is reached. 

3. The device according to claim 2, wherein the use 
restriction is defined as a maximum admissible number of 
uses of the corresponding key stored in said control unit, and 
each use of a vehicle key is selectively counted for the 
corresponding vehicle key, and a vehicle key is classified as 
unauthorized upon reaching the maximum admissible num- 
ber of uses stipulated therefor. 

4. The device according to claim 1, wherein said control 
unit contains a memory storing a time value for the corre- 
sponding vehicle key, and said control unit no longer accepts 
as valid a vehicle key a time value of which has been 
reached. 

5. The device according to claim 4, wherein the time value 
is stored as an admissible number of use days. 

6. The device according to claim 1, wherein the data 
received by said control unit from the central office contain 
a vehicle key identifier notifying said control unit for which 
respective vehicle key the transmitted information is to be 
stored. 

7. The device according to claim 1, wherein the data 
received by said control unit from the central office contain 
a vehicle key identifier notifying said control unit for which 
respective vehicle key one of a transmitted maximum use 
number and a time value is to be stored. 

8. The device according to claim 1, wherein said key 
authorization is stored in said control unit. 

9. A method of blocking a motor vehicle against unau- 
thorized use, which comprises; 

selectively sending use authorization information for each 
of a plurality of vehicle keys of a motor vehicle from 
a central office to a control unit disposed in the motor 



06/09/2004, EAST version: 1.4.1 



US 6,538,557 Bl 



vehicle, wherein each vehicle key is provided with its 

own identifier; 
determining upon an activation of a respective vehicle key 

if a key authorization is present in the control unit for 

the respective vehicle key; 
determining only after it has been determined that a key 

authorization is present in the control unit for the 

respective vehicle key, if a use authorization is present 

in the control unit for the respective vehicle key; and 
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releasing a function requested by the respective key only 
when use authorization is present in the control unit. 

10. The method according to claim 9, wherein the step of 
determining upon an activation of a respective vehicle key 
if a key authorization is present for the respective vehicle 
key is performed by accessing key authorization information 
stored in a control unit. 
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